Privacy Policy

Version 2.0 · Effective [DATE TO CONFIRM ON PUBLICATION] · Last updated 6 July 2026

1. About this policy

This Privacy Policy explains how Wristband collects, uses, discloses and protects your personal information, and how you can access, correct or complain about it.

Wristband ("we", "us", "our") is a registered business name of a partnership between Daniel Cartagena and Mike Myers (ABN [TO INSERT]). We are based in Western Australia and Wristband is currently offered to people in Australia only.

We are committed to handling your personal information in accordance with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth), and we apply that standard to our handling of personal information even where we may not currently be legally required to. If anything in this policy is unclear, contact us at hello@trywristband.com.

2. What we mean by "personal information"

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable. It does not include information that has been aggregated or de-identified so that you can no longer reasonably be identified.

3. The personal information we collect

We collect only what we need to run Wristband. Depending on how you use the service, this may include:

When you join the waitlist

• your email address;
• the page or source you signed up from;
• your consent choices (waitlist notice, this Privacy Policy, overseas-disclosure consent);
• your IP address at signup (kept for no more than 30 days, for security and abuse-prevention only).

When you create an account

• your email address;
• your display name (and a short history of previous display names, kept for 90 days after each change, for impersonation and abuse prevention);
• your password (stored only as a secure cryptographic hash — we never see or store it in readable form);
• your country (currently Australia only);
• your consent choices (terms, this Privacy Policy, overseas-disclosure consent, and confirmation that you are 16 or older), including which version you accepted and when.

When you use your account

• the events, festivals, concerts and artists you add to your live-music history;
• your private archive of shows you have attended (visible only to you unless you publish your profile — see section 8);
• your account settings, Wristband Pro credits, milestones and leaderboard standing.

When you contribute via the build portal

• the festival, concert and lineup information you submit or edit;
• whether you attended an event you submitted;
• your contribution and hit-list activity, including counts of approved and rejected submissions.

When you contact us

• your name (if you give it), email address, the contents of your message, and your IP address (for rate-limiting and abuse prevention).

Automatically, for security and to run the service

• IP addresses and request metadata in our rate-limiting and abuse-prevention logs;
• bot-detection signals from our security check (see section 6);
• an internal audit log of significant account and moderation actions;
• email delivery and bounce events from our email provider;
• essential session cookies that keep you signed in.

We do not knowingly collect sensitive information (such as health, racial, political or biometric information), and you should not submit it through Wristband.

4. How we collect it

We collect personal information:

• directly from you — when you join the waitlist, create an account, use the service, contribute content, or contact us;
• automatically — through your use of the site, for security as described above; and
• from contributors and public sources — contributed and imported information is about public events, festivals and performing artists, not about other private individuals (see section 9).

5. Why we collect and use it

We use personal information to:

• create and operate your account and your live-music history;
• run the contributor build portal, moderate submissions, and award Wristband Pro credits;
• send you essential service emails (verification, security, account, submission outcomes) and, if you don't opt out, activity digests about your own account and contributions;
• provide customer support and respond to your enquiries;
• keep Wristband secure — preventing fraud, abuse, spam and unauthorised access;
• understand and improve how the product is used; and
• comply with our legal obligations.

With your consent, we may also send you marketing communications about Wristband (see section 11). We do not currently send marketing email. You can opt out at any time.

We will only use your personal information for a purpose you would reasonably expect, or for which you have given consent, or as permitted by law.

6. Cookies and similar technologies

We use a small number of essential cookies that are necessary to sign you in and keep your session secure. We do not use analytics, advertising or cross-site tracking cookies. Because we only use essential cookies, you may not be able to disable them without affecting how the site works.

We use Cloudflare Turnstile as a privacy-respecting bot and abuse check on some forms. It helps us tell humans from automated traffic without the tracking used by traditional CAPTCHAs.

7. Automated decisions

We use automated systems in limited, operational ways:

• bot detection (Cloudflare Turnstile) decides whether a form submission looks human;
• rate limiting automatically slows or blocks abusive traffic by IP;
• adaptive security checks decide how often contributors are asked to complete the Turnstile check, based on their submission history;
• credits and milestones (such as Wristband Pro credits and contributor milestones) are awarded automatically according to fixed rules; and
• scheduled data deletion runs automatically per the retention table in section 14.

Decisions that significantly affect you — such as approving or rejecting a contribution, or suspending an account — are made by a human reviewer, not by an automated system.

8. Information visible to other people

Wristband is designed to let you build — and, if you choose, publish — a live-music history.

• Your display name is how you appear on Wristband.
• Your archive is private by default. The shows you log are visible only to you unless you publish your profile.
• Publishing your profile is a deliberate choice. If you publish, your profile becomes publicly visible at your chosen handle (for example trywristband.com/@yourname), showing your display name, handle, fan tier and stats, and your show timeline. Anyone with the link can view it, and public profiles can appear in search-engine results. Some detail — such as exactly which artists you saw at each show — stays private even on a published profile.
• You can unpublish at any time. Your profile immediately stops being publicly accessible, though copies may persist for a time in search-engine caches or where others have saved them.
• The contributor leaderboard. If you opt in to the leaderboard, your display name and contributor rank are publicly visible. You can opt out at any time in your account settings.
• Contributions. Factual event and lineup information you contribute becomes part of the public Wristband archive and is visible to everyone.

Think about what you choose to make public. Information you make public can be seen, copied and re-shared by others, and may continue to appear in caches or search results.

9. Information about artists and performers

The Wristband archive contains factual information about music events and the artists who performed at them — artist and act names, and where and when they performed. This is professional, publicly available information about people performing in public, sourced from contributors and from open community databases (such as MusicBrainz — see our open-data attributions). We do not hold private information about performers.

If you are a performer and believe information about you in the archive is inaccurate, or you wish to raise a privacy concern about it, contact hello@trywristband.com and we will review it (see also sections 15 and 19).

10. Who we share your information with

We do not sell your personal information, and we do not trade in personal information.

We share personal information only with service providers who help us run Wristband, and only so they can perform services for us under appropriate confidentiality and data-handling obligations. These include:

We may also create and share aggregated or de-identified information — for example, statistics about events, or open datasets of factual event and lineup data, which we may publish or license to third parties. This information does not identify you and is not personal information.

We may disclose personal information where required or authorised by law, to protect our rights or the safety of others, or in connection with a sale or restructure of the business (in which case this policy will continue to apply).

11. Overseas disclosure

Some of our service providers are located outside Australia (currently the United States, and Cloudflare's global network). When you sign up, we ask for your consent to this overseas disclosure.

By consenting, you acknowledge that we will take reasonable steps to ensure overseas recipients handle your personal information consistently with the APPs, but that APP 8.1 will not apply to that disclosure, and we will not be accountable under the Privacy Act for how an overseas recipient handles your information, nor will you be able to seek redress under the Privacy Act against that overseas recipient. Our core database is hosted in Sydney, Australia.

12. Direct marketing

We do not currently send marketing email. If we introduce marketing communications (such as product news and updates), we will only send them where you have consented to receive them, or where the law otherwise permits.

Every marketing email will identify us as the sender and include a working unsubscribe link. You can opt out at any time by using that link or by emailing hello@trywristband.com. Opting out of marketing will not stop essential service emails (such as security, verification and account notices), which we need to send to operate your account.

If you unsubscribe, we keep your email address on a permanent suppression list so that we never email you again. That record is kept indefinitely and used only to honour your opt-out.

13. How we keep your information secure

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These steps include passwords stored only as secure hashes, row-level database access controls, locked-down database functions, encrypted connections, rate limiting, bot-detection, and an internal admin audit log.

No method of transmission or storage is completely secure, but we work to protect your information and to respond appropriately if something goes wrong (see section 17).

14. How long we keep your information

We keep personal information only for as long as we need it:

When information is no longer needed, we delete or de-identify it.

15. Accessing and correcting your information

Access (APP 12). You can ask for a copy of the personal information we hold about you. You can export your data directly from your account settings; for security we will ask you to verify the request by email before the export is released. You can also email us at hello@trywristband.com. We will respond within a reasonable time (usually within 30 days).

Correction (APP 13). If your information is inaccurate, out of date, incomplete, irrelevant or misleading, you can ask us to correct it, including through your account settings or by emailing us. If we disagree, we will tell you why and you can ask us to attach a statement noting your view.

16. Deleting your account

You can delete your account from your account settings. When you do:

• your display name, email address and leaderboard presence are anonymised immediately;
• a snapshot of your profile is moved to a secure recovery store, and permanently erased after 30 days (if you change your mind within 30 days, contact us and we may be able to restore your account);
• after the 30-day purge, your profile, archive and submission records are permanently deleted;
• factual event and lineup data you contributed remains part of the shared music history but is not linked to you; and
• audit-log entries about your account are de-identified.

We do not charge for access, correction or deletion requests in normal circumstances.

17. Data breaches

If a data breach occurs that is likely to result in serious harm, we will act to contain it and will notify affected individuals and, where applicable, the Office of the Australian Information Commissioner (OAIC), consistent with the Notifiable Data Breaches scheme.

18. Children

Wristband is not intended for people under 16. You must confirm you are 16 or older to create an account. If we become aware that we have collected personal information from a person under 16 without appropriate consent, we will delete it.

19. Complaints

If you have a privacy concern or complaint, contact us first at hello@trywristband.com with enough detail for us to investigate. We will acknowledge your complaint and aim to resolve it within a reasonable time (usually within 30 days).

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au · 1300 363 992.

20. Changes to this policy

We may update this policy from time to time. When we make a material change, we will update the version and effective date and, where appropriate, notify you (for example, by email or in-app). Each version is published with a version identifier, and previous versions remain available. Continuing to use Wristband after a change takes effect means you accept the updated policy.

21. How to contact us

Wristband (a registered business name of a partnership of Daniel Cartagena and Mike Myers), ABN [TO INSERT] Western Australia, Australia Email: hello@trywristband.com